vulnerability

Amazon Linux AMI 2: CVE-2021-32280: Security patch for transfig (ALAS-2023-2173)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Sep 20, 2021
Added
Aug 8, 2023
Modified
Aug 8, 2023

Description

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8.

Solutions

amazon-linux-ami-2-upgrade-transfigamazon-linux-ami-2-upgrade-transfig-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.